course | Certified Incident Handler (CIH)
We turn your development needs and aspirations into powerful digital solutions that drive growth
IT-2534 | Certified Incident Handler (CIH)
Course Sector : Information Technology
| Duration | Date from | Date to | Course Venue | Course fees | Book a course |
|---|---|---|---|---|---|
| 5 Days | 2025-12-07 | 2025-12-11 | Riyadh | $4,250 | Book now |
| 5 Days | 2025-07-14 | 2025-07-18 | Dubai | $4,250 | Book now |
Course Introduction
The Certified Incident Handler (CIH) program is designed to equip professionals with the core competencies to detect, respond to, and mitigate cyber incidents across a range of environments. In a world of escalating cyber threats, incident handling is no longer a luxury, it’s a necessity. This intensive, hands-on course empowers participants with the latest methodologies in handling network intrusions, data breaches, ransomware, and advanced persistent threats (APTs). Through real-world case studies, frameworks, and simulation exercises, learners gain the confidence to manage incident lifecycles and reduce business risks with professionalism and speed.
Course objective
- Understand the principles, phases, and frameworks of incident handling
- Recognize types and categories of cybersecurity incidents
- Prepare and implement an Incident Response Plan (IRP)
- Investigate and contain malware, insider threats, and DoS/DDoS attacks
- Apply forensic techniques in evidence collection and analysis
- Coordinate post-incident recovery, documentation, and lessons learned
- Communicate with internal/external stakeholders effectively during incidents
Course Outline | DAY 01
Introduction to Incident Handling & Response Frameworks
- Understanding incident types and classification
- Cyber threat landscape: threats, actors, vectors
- Legal and ethical considerations
- Incident response frameworks: NIST, ISO, SANS PICERL
- Building a Computer Security Incident Response Team (CSIRT)
Course Outline | Day 02
Preparation & Detection
- Crafting an Incident Response Plan (IRP)
- Asset identification and risk prioritization
- SIEM and log correlation basics
- Indicators of Compromise (IoCs) and Indicators of Attack (IoAs)
- Threat detection and early warning systems
Course Outline | Day 03
Containment, Eradication, and Recovery
- Incident containment strategies (short-term & long-term)
- Malware containment and remediation workflows
- Root cause analysis and attack vector tracing
- Restoring systems and ensuring clean recovery
- Managing cloud and hybrid environment incidents
Course Outline | Day 04
Digital Forensics & Investigation
- Introduction to digital evidence and forensic procedures
- Live system and memory acquisition
- Disk and file system forensics
- Evidence chain of custody and preservation
- Hands-on case analysis and artifact interpretation
Course Outline | Day 05
Post-Incident Handling and Capstone Exercise
- Reporting, documentation, and audit readiness
- Conducting post-mortem and lessons-learned workshops
- Communication strategy during and after incidents
- Hands-on simulated cyber incident (end-to-end response)
- Final assessment and feedback
BOOST’s Professional Attendance Certificate “BPAC”
BPAC is always given to the delegates after completing the training course,and depends on their attendance of the program at a rate of no less than 80%,besides their active participation and engagement during the program sessions.
Since 2001, we have been pioneering the training field in the Middle East, helping individuals, teams, and organizations reach their full potential with integrated solutions.
🔗 Quick Links
Sister Companies to Boost Consulting and Training
most trending
And Recommended Training Courses
We believe in progress for everyone.
We helped more than 10,000 clients over 20 countries on 4 continents in boosting their knowledge, skills, and careers.
Boost Training And Consulting All Copyrights Reserved 2025